Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft
File:                     Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft (raw, json)
Hash identifier:          UtZ09JMfZnvjzmkupcXUPMkQWupwcvCgiIdXMlboEik=
Subject key identifier:   0A:23:3A:1E:67:DC:5A:99:2D:A1:99:7E:62:4B:7D:82:05:F3:8F:86
Authority key identifier: 36:BE:69:7C:84:89:F4:82:22:0F:5C:40:64:BA:BE:4C:83:C4:19:D6
Certificate issuer:       /CN=36be697c8489f482220f5c4064babe4c83c419d6
Certificate serial:       018F874889FC6F5E097404C0DC4E9B127EFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft
Manifest number:          0606
Signing time:             Fri 17 May 2024 16:00:29 +0000
Manifest this update:     Fri 17 May 2024 16:00:29 +0000
Manifest next update:     Sat 18 May 2024 16:00:29 +0000
Files and hashes:         1: Nr5pfISJ9IIiD1xAZLq-TIPEGdY.crl (hash: 67IJUDUUSAtHnuLI/iPJw/lNjBDD9cht/VIt9aD75rM=)
                          2: Q4iqKFUc0D2tQdJ6MKyU0VtKsY0.roa (hash: fKqijXTJRXDQP/OB6VKYqKoHIVEN7PnyNAm2SBQqt5k=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:89:fc:6f:5e:09:74:04:c0:dc:4e:9b:12:7e:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36be697c8489f482220f5c4064babe4c83c419d6
        Validity
            Not Before: May 17 16:00:29 2024 GMT
            Not After : May 18 16:00:29 2024 GMT
        Subject: CN=0a233a1e67dc5a992da1997e624b7d8205f38f86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:11:d2:dc:f1:df:c4:4a:a1:66:cd:d4:dc:f7:
                    89:e3:fe:41:24:a0:c9:10:ad:af:85:18:cd:9b:25:
                    da:81:26:52:d5:ba:a2:f8:d5:2a:3f:e3:43:8e:54:
                    a5:f5:bb:8f:9e:14:2a:c1:dc:3c:95:45:98:f8:c4:
                    42:bb:09:eb:cf:19:ff:bc:f6:28:e6:f9:da:33:d5:
                    de:c2:54:d2:80:09:c4:40:c2:ae:3e:50:5c:5e:1f:
                    e9:94:37:99:ec:a1:39:6b:2c:4a:a4:c6:b6:ce:bd:
                    87:e1:1e:de:ee:be:f1:23:f8:57:eb:ca:57:06:5f:
                    02:d8:28:ba:28:b0:59:44:98:5d:7f:25:c6:bf:d7:
                    e8:5c:99:ba:27:aa:6c:28:a8:9c:b3:65:61:87:85:
                    6e:78:4d:d5:85:2a:d9:0a:a7:74:ff:d1:77:15:07:
                    4e:f4:c2:6a:04:5c:fd:ce:01:6b:d7:4f:09:3b:0d:
                    73:a5:4b:14:67:5c:12:fb:05:73:81:c3:f0:2d:76:
                    e5:d3:50:d7:29:6c:a3:09:4e:8d:ed:4a:96:1e:f1:
                    f2:01:7a:f0:53:87:06:b3:3c:bf:9b:c3:b6:e7:63:
                    5f:00:df:67:0f:2a:7e:71:98:d6:9c:8f:2e:d2:15:
                    78:21:94:1b:24:1c:50:dd:54:ea:7c:e4:6d:4b:37:
                    5a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:23:3A:1E:67:DC:5A:99:2D:A1:99:7E:62:4B:7D:82:05:F3:8F:86
            X509v3 Authority Key Identifier:
                keyid:36:BE:69:7C:84:89:F4:82:22:0F:5C:40:64:BA:BE:4C:83:C4:19:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03c59c-d257-48ac-ba33-b0eead7c2488/1/Nr5pfISJ9IIiD1xAZLq-TIPEGdY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:14:8f:35:64:5f:a5:8f:81:61:d0:ca:99:83:19:c1:d7:b7:
         82:0c:99:d3:61:4c:6c:6b:2f:fd:e3:81:e0:84:0d:38:d8:27:
         7c:05:7c:00:54:68:ab:1c:e4:9b:1c:3b:a1:a2:9d:2b:b0:6e:
         45:ec:93:54:0b:79:f3:ce:b8:25:ab:bf:eb:56:55:64:d9:b1:
         36:7c:0e:9d:c7:9f:85:75:81:8b:60:db:36:2f:c5:0f:04:76:
         70:ae:18:c1:61:01:8a:1b:9b:00:3f:af:ce:93:dd:98:ba:c6:
         8e:ee:ad:ed:80:d4:05:89:9a:77:6b:55:15:ec:38:ee:7e:53:
         96:bb:aa:c7:6a:eb:3e:3a:3d:1d:90:90:65:c5:f4:a7:64:0e:
         d2:68:c5:b6:5a:78:5e:3f:7d:05:8f:d4:a2:07:7f:33:f7:17:
         a1:69:c0:f6:ca:63:d5:62:87:cb:5e:36:8a:13:57:28:28:17:
         d4:80:c0:cf:bf:2c:a3:dd:63:ea:9d:57:40:b8:1f:2b:b2:51:
         29:e4:3a:c6:72:9e:fe:c6:36:97:c1:9c:00:51:46:4d:ff:e9:
         b7:4f:28:29:a2:e1:f1:59:46:2a:6c:67:e9:2b:ab:46:79:a8:
         9f:2b:47:4d:41:30:fa:33:bb:5f:e9:15:5b:be:c4:89:27:88:
         7d:af:2d:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+HSIn8b14JdATA3E6bEn76MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YmU2OTdjODQ4OWY0ODIyMjBmNWM0MDY0YmFiZTRjODNj
NDE5ZDYwHhcNMjQwNTE3MTYwMDI5WhcNMjQwNTE4MTYwMDI5WjAzMTEwLwYDVQQD
EygwYTIzM2ExZTY3ZGM1YTk5MmRhMTk5N2U2MjRiN2Q4MjA1ZjM4Zjg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0RHS3PHfxEqhZs3U3PeJ4/5BJKDJ
EK2vhRjNmyXagSZS1bqi+NUqP+NDjlSl9buPnhQqwdw8lUWY+MRCuwnrzxn/vPYo
5vnaM9XewlTSgAnEQMKuPlBcXh/plDeZ7KE5ayxKpMa2zr2H4R7e7r7xI/hX68pX
Bl8C2Ci6KLBZRJhdfyXGv9foXJm6J6psKKics2Vhh4VueE3VhSrZCqd0/9F3FQdO
9MJqBFz9zgFr108JOw1zpUsUZ1wS+wVzgcPwLXbl01DXKWyjCU6N7UqWHvHyAXrw
U4cGszy/m8O252NfAN9nDyp+cZjWnI8u0hV4IZQbJBxQ3VTqfORtSzda9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAojOh5n3FqZLaGZfmJLfYIF84+GMB8GA1UdIwQY
MBaAFDa+aXyEifSCIg9cQGS6vkyDxBnWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnI1cGZJU0o5SUlpRDF4QVpMcS1USVBFR2RZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8wM2M1OWMtZDI1Ny00OGFjLWJhMzMt
YjBlZWFkN2MyNDg4LzEvTnI1cGZJU0o5SUlpRDF4QVpMcS1USVBFR2RZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8wM2M1OWMtZDI1Ny00OGFjLWJhMzMtYjBlZWFkN2MyNDg4
LzEvTnI1cGZJU0o5SUlpRDF4QVpMcS1USVBFR2RZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArBSPNWRf
pY+BYdDKmYMZwde3ggyZ02FMbGsv/eOB4IQNONgnfAV8AFRoqxzkmxw7oaKdK7Bu
ReyTVAt58864Jau/61ZVZNmxNnwOncefhXWBi2DbNi/FDwR2cK4YwWEBihubAD+v
zpPdmLrGju6t7YDUBYmad2tVFew47n5Tlruqx2rrPjo9HZCQZcX0p2QO0mjFtlp4
Xj99BY/Uogd/M/cXoWnA9spj1WKHy142ihNXKCgX1IDAz78so91j6p1XQLgfK7JR
KeQ6xnKe/sY2l8GcAFFGTf/pt08oKaLh8VlGKmxn6SurRnmonytHTUEw+jO7X+kV
W77EiSeIfa8tHg==
-----END CERTIFICATE-----
Generated at Fri May 17 17:57:25 2024 by rpki-client on console-ams.rpki-client.org